# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=309

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 310

---

## [Creating Kibana Chart of Latest time stamps with sum](https://discuss.elastic.co/t/creating-kibana-chart-of-latest-time-stamps-with-sum/277476)

<div class="topic-metadata">

**Author:** [@kibanaNewbie23](https://discuss.elastic.co/u/kibanaNewbie23)\
**Replies:** 4\
**Last updated:** [June 30, 2021, 3:45pm UTC](https://discuss.elastic.co/t/creating-kibana-chart-of-latest-time-stamps-with-sum/277476 "2021-06-30T15:45:35Z")

</div>

Hello! I have a record like this : { server: 1, size: 10, @timestamp: "2021-6-28 09:00"} { server: 2, size: 30, @timestamp: "2021-6-28 09:00"} { server: 3, size: 40, @timestamp: "2021-6-28 09:00"} { server: 1, size: …

---

## [Kibana not filtering specific visulization](https://discuss.elastic.co/t/kibana-not-filtering-specific-visulization/277360)

<div class="topic-metadata">

**Author:** [@thibdeb](https://discuss.elastic.co/u/thibdeb)\
**Replies:** 6\
**Last updated:** [June 30, 2021, 3:33pm UTC](https://discuss.elastic.co/t/kibana-not-filtering-specific-visulization/277360 "2021-06-30T15:33:20Z")

</div>

Hello everyone, I'm working on a project on Kibana to do a dashboard with specifics visualizations from 2 files, a .log file and a .csv file, I have two index patterns too. I use a panel to select what kind of data I w…

---

## [Unable to find "kibana.autocompleteTimeout" in kibana.yml](https://discuss.elastic.co/t/unable-to-find-kibana-autocompletetimeout-in-kibana-yml/277472)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 2\
**Last updated:** [June 30, 2021, 2:51pm UTC](https://discuss.elastic.co/t/unable-to-find-kibana-autocompletetimeout-in-kibana-yml/277472 "2021-06-30T14:51:35Z")

</div>

I have a control visualization , where i can't seem to find a filename that was processed . i can only see one of the files (two log files were ingested) . These are very large files and contain huge lines of informatio…

---

## [Change colour of Metric Visualization for Percentile ranks aggregation](https://discuss.elastic.co/t/change-colour-of-metric-visualization-for-percentile-ranks-aggregation/277454)

<div class="topic-metadata">

**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\
**Replies:** 3\
**Last updated:** [June 30, 2021, 2:48pm UTC](https://discuss.elastic.co/t/change-colour-of-metric-visualization-for-percentile-ranks-aggregation/277454 "2021-06-30T14:48:57Z")

</div>

Hi Kibana: 7.9.3 We are using metric visualization to get percentile ranks. Based on the percentage, I am trying to change colour of the background from Green to Red. But the color remains the same for any Ranges I giv…

---

## [Unable to create "Maps" visualization - Getting "Selected index pattern does not contain source and destination fields."](https://discuss.elastic.co/t/unable-to-create-maps-visualization-getting-selected-index-pattern-does-not-contain-source-and-destination-fields/276683)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 11\
**Last updated:** [June 30, 2021, 2:29pm UTC](https://discuss.elastic.co/t/unable-to-create-maps-visualization-getting-selected-index-pattern-does-not-contain-source-and-destination-fields/276683 "2021-06-30T14:29:25Z")

</div>

I'm unable to create "Maps" visualization. I get the error "Selected index pattern does not contain source and destination fields." I'm on version 7.13.2 ELK I used geoip to define the source and destination IP fields …

---

## [Kibana Showing Limited UI Options](https://discuss.elastic.co/t/kibana-showing-limited-ui-options/277357)

<div class="topic-metadata">

**Author:** [@toneyalexander](https://discuss.elastic.co/u/toneyalexander)\
**Replies:** 2\
**Last updated:** [June 30, 2021, 1:56pm UTC](https://discuss.elastic.co/t/kibana-showing-limited-ui-options/277357 "2021-06-30T13:56:26Z")

</div>

I have an Elasticsearch cluster with Kibana installed on one of the nodes. We have a beta and a prod cluster which are generally very similar, however one of them has been having a strange Kibana issue. Normally, and on …

---

## [\[savedobjects-service\] Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/savedobjects-service-unable-to-retrieve-version-information-from-elasticsearch-nodes/277416)

<div class="topic-metadata">

**Author:** [@ibreighith](https://discuss.elastic.co/u/ibreighith)\
**Replies:** 1\
**Last updated:** [June 30, 2021, 12:26pm UTC](https://discuss.elastic.co/t/savedobjects-service-unable-to-retrieve-version-information-from-elasticsearch-nodes/277416 "2021-06-30T12:26:31Z")

</div>

Kibana.yml # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601 # Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid va…

---

## [How to quote/escape esQuery when it contains quotes?](https://discuss.elastic.co/t/how-to-quote-escape-esquery-when-it-contains-quotes/277384)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 2\
**Last updated:** [June 30, 2021, 11:26am UTC](https://discuss.elastic.co/t/how-to-quote-escape-esquery-when-it-contains-quotes/277384 "2021-06-30T11:26:31Z")

</div>

Dear all =) I am using the Create Rule API with the Elasticsearch query action. It works perfectly until I need to query something that includes quotes. Example host:"10.250.11.11". Ideally I would like to write it as …

---

## [Difference between log and dashboard](https://discuss.elastic.co/t/difference-between-log-and-dashboard/277066)

<div class="topic-metadata">

**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\
**Replies:** 2\
**Last updated:** [June 30, 2021, 9:33am UTC](https://discuss.elastic.co/t/difference-between-log-and-dashboard/277066 "2021-06-30T09:33:38Z")

</div>

Hello, I'm on Kibana v7.12.0 I have a fied "CommanLine" and in THIS log is very long. And when i want to add it on Dashboard, I have (Missing Value) but only for this field, the other are ok. I supose it's becau…

---

## [TSVB Time Series](https://discuss.elastic.co/t/tsvb-time-series/277351)

<div class="topic-metadata">

**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\
**Replies:** 6\
**Last updated:** [June 30, 2021, 7:22am UTC](https://discuss.elastic.co/t/tsvb-time-series/277351 "2021-06-30T07:22:24Z")

</div>

I have created Time series chart and now I would like to implement alert on it. Is there any possibility? if yes, then pls give me some idea regarding it. Thanks

---

## [Super slow dashboard](https://discuss.elastic.co/t/super-slow-dashboard/277206)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 5\
**Last updated:** [June 30, 2021, 6:55am UTC](https://discuss.elastic.co/t/super-slow-dashboard/277206 "2021-06-30T06:55:12Z")

</div>

It takes many minutes to update data in Kibana dashboard. How can I know if it is kibana or elasticsearch that I need to upgrade? Both have 2Gb ram and 2 zones

---

## [Unable to access Kibana with “License is not available.”](https://discuss.elastic.co/t/unable-to-access-kibana-with-license-is-not-available/274323)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 7\
**Last updated:** [June 30, 2021, 2:13am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-with-license-is-not-available/274323 "2021-06-30T02:13:41Z")

</div>

I have installed WorkplaceSearch. I added the x-pack configuration to ElasticSearch by referring to the following URL. Specifically, I have made the following statement. $vi /etc/elasticsearch/elasticsearch.yml xpack…

---

## [Runtime in Kibana Visualization Only (without using Index Pattern/Index Runtime Field)](https://discuss.elastic.co/t/runtime-in-kibana-visualization-only-without-using-index-pattern-index-runtime-field/276979)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 6\
**Last updated:** [June 29, 2021, 10:29pm UTC](https://discuss.elastic.co/t/runtime-in-kibana-visualization-only-without-using-index-pattern-index-runtime-field/276979 "2021-06-29T22:29:04Z")

</div>

Hi All, I was wondering if there is a way to add a runtime field that is only available in a single Kibana visualization. Looking at the runtime field docs it seems possible to add the field at query execution time. Th…

---

## [List of all ctx.\* / context.\* I can use in a Kibana webhook payload?](https://discuss.elastic.co/t/list-of-all-ctx-context-i-can-use-in-a-kibana-webhook-payload/277335)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 2\
**Last updated:** [June 29, 2021, 8:07pm UTC](https://discuss.elastic.co/t/list-of-all-ctx-context-i-can-use-in-a-kibana-webhook-payload/277335 "2021-06-29T20:07:27Z")

</div>

Dear all =) Does anyone know if there exist a list of all the info I can include in a Kibana rule/webhook payload? Right now I have "watch\_id":"{{ctx.watch\_id}}", "id":"{{ctx.id}}", "payload":"{{ctx.payload}}", "e…

---

## [Kibana Install in MAC OS using darwin package?](https://discuss.elastic.co/t/kibana-install-in-mac-os-using-darwin-package/277203)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [June 29, 2021, 7:38pm UTC](https://discuss.elastic.co/t/kibana-install-in-mac-os-using-darwin-package/277203 "2021-06-29T19:38:11Z")

</div>

Since it was an urgency, i installed using tar.gz darwin package of kibana. Can darwin package for kibana & Elasticsearch be installed as standard in mac OS? Or should we always use homebrew? Regards

---

## [7.12 Kibana log alerting - pass log details to PagerDuty](https://discuss.elastic.co/t/7-12-kibana-log-alerting-pass-log-details-to-pagerduty/272506)

<div class="topic-metadata">

**Author:** [@tslattery](https://discuss.elastic.co/u/tslattery)\
**Replies:** 3\
**Last updated:** [June 29, 2021, 7:15pm UTC](https://discuss.elastic.co/t/7-12-kibana-log-alerting-pass-log-details-to-pagerduty/272506 "2021-06-29T19:15:51Z")

</div>

7.12 Kibana alerting I am trying to get some details of a log message to propagate to PagerDuty. The Connector is working and events are created in PD. The alert configuration: I read these two threads and under…

---

## [Missing Fields when Creating Alert in Kibana](https://discuss.elastic.co/t/missing-fields-when-creating-alert-in-kibana/275448)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 3\
**Last updated:** [June 29, 2021, 7:05pm UTC](https://discuss.elastic.co/t/missing-fields-when-creating-alert-in-kibana/275448 "2021-06-29T19:05:56Z")

</div>

Hi guys, so i tried to setup a few simple Kibana Alerts combined with a log-connector. I'm running Elastic-Stack 7.11 on 3 CentOS 7 Servers. There was no problem in enabeling the alerts, but now when i try to create …

---

## [You must enable Transport Layer Security](https://discuss.elastic.co/t/you-must-enable-transport-layer-security/276696)

<div class="topic-metadata">

**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\
**Replies:** 2\
**Last updated:** [June 29, 2021, 6:10pm UTC](https://discuss.elastic.co/t/you-must-enable-transport-layer-security/276696 "2021-06-29T18:10:20Z")

</div>

My Kibana version is 7.9.2. In my docker-compose.yaml file, when I change the path of source from conf to config- my Kibana alerts are disabled and it says to enable TLS: PS. I am changing the source path from conf …

---

## [30 Day Daily Average Gauge](https://discuss.elastic.co/t/30-day-daily-average-gauge/277205)

<div class="topic-metadata">

**Author:** [@Ryan\_Kapsak](https://discuss.elastic.co/u/Ryan_Kapsak)\
**Replies:** 3\
**Last updated:** [June 29, 2021, 4:33pm UTC](https://discuss.elastic.co/t/30-day-daily-average-gauge/277205 "2021-06-29T16:33:00Z")

</div>

Hi! I am having some trouble setting up a gauge accurately for a visualization in Kibana. I want to display a Daily # of orders that is sold over a 30 day period. My variables are 'order\_qty' and 'date' for the timestamp…

---

## [Cannot connect to kibana through port 5601](https://discuss.elastic.co/t/cannot-connect-to-kibana-through-port-5601/277288)

<div class="topic-metadata">

**Author:** [@cfiske1](https://discuss.elastic.co/u/cfiske1)\
**Replies:** 4\
**Last updated:** [June 29, 2021, 4:31pm UTC](https://discuss.elastic.co/t/cannot-connect-to-kibana-through-port-5601/277288 "2021-06-29T16:31:20Z")

</div>

I am trying to implement kibana and elasticsearch on an azure VM, and while I can get both of them running, I am unable to connect with kibana. After starting both programs, kibana gives me the message " log \[05:14:15…

---

## [Lucene Query Language using now date time](https://discuss.elastic.co/t/lucene-query-language-using-now-date-time/275579)

<div class="topic-metadata">

**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Replies:** 3\
**Last updated:** [June 29, 2021, 4:19pm UTC](https://discuss.elastic.co/t/lucene-query-language-using-now-date-time/275579 "2021-06-29T16:19:56Z")

</div>

In Lucene for a date range its possible to do date:{\* TO 2012-01-01}, is it possible to use the now date time such as date:{now-60d/d TO now/d}

---

## [TSVB Aggregation filter](https://discuss.elastic.co/t/tsvb-aggregation-filter/275477)

<div class="topic-metadata">

**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Replies:** 5\
**Last updated:** [June 29, 2021, 4:18pm UTC](https://discuss.elastic.co/t/tsvb-aggregation-filter/275477 "2021-06-29T16:18:58Z")

</div>

I want to show a gauge with a value that is calculated via an aggregation, the issue is i want the aggregations to be based on a filter, such that I have a count value that is (number of docs with attribute:A) I have a…

---

## [Use script in aggregation](https://discuss.elastic.co/t/use-script-in-aggregation/275873)

<div class="topic-metadata">

**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Replies:** 4\
**Last updated:** [June 29, 2021, 4:18pm UTC](https://discuss.elastic.co/t/use-script-in-aggregation/275873 "2021-06-29T16:18:31Z")

</div>

I think im almost there so hopefully this should be an easy fix, im trying to get a percentage value Percentage of docs that meet the filtered\_docs criteria out of all the docs in the index. Calculation should be - (to…

---

## [Data table :hide column Count](https://discuss.elastic.co/t/data-table-hide-column-count/277292)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 2\
**Last updated:** [June 29, 2021, 4:17pm UTC](https://discuss.elastic.co/t/data-table-hide-column-count/277292 "2021-06-29T16:17:02Z")

</div>

Hello Team, In a data table, is it possible to hide column Count ? I have to display response code and its percentage in table. But data table visualization forcing me to enable metric. Thanks

---

## [Kibana 7.10.2 Lens not showing](https://discuss.elastic.co/t/kibana-7-10-2-lens-not-showing/277362)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [June 29, 2021, 3:04pm UTC](https://discuss.elastic.co/t/kibana-7-10-2-lens-not-showing/277362 "2021-06-29T15:04:49Z")

</div>

Hi all, When i try to create new visualization, Lens option not showing. According to documentation, Lens should be available in 7.10.2. Any settings or config to be made?

---

## [Line break not working on Slack notification message](https://discuss.elastic.co/t/line-break-not-working-on-slack-notification-message/276824)

<div class="topic-metadata">

**Author:** [@baptiste](https://discuss.elastic.co/u/baptiste)\
**Replies:** 1\
**Last updated:** [June 29, 2021, 2:38pm UTC](https://discuss.elastic.co/t/line-break-not-working-on-slack-notification-message/276824 "2021-06-29T14:38:15Z")

</div>

Hi! I'm using a Trigger to send a slack message. Since couple of days all the line break (\\n) seems to have disappeared in the resulting message in slack. Therefore the message previous and the actual message on slack …

---

## [Can't start kibana when enabling preconfigured alert history](https://discuss.elastic.co/t/cant-start-kibana-when-enabling-preconfigured-alert-history/276946)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 1\
**Last updated:** [June 29, 2021, 2:17pm UTC](https://discuss.elastic.co/t/cant-start-kibana-when-enabling-preconfigured-alert-history/276946 "2021-06-29T14:17:21Z")

</div>

I am using elastic stack 7.12.0 and enabled alerting specifying a value for xpack.encryptedSavedObjects.encryptionKey in kibana.yml. At this stage alerting works well with Server log connector. When I tried to activate A…

---

## [Ctx" variables in Alerts](https://discuss.elastic.co/t/ctx-variables-in-alerts/276403)

<div class="topic-metadata">

**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\
**Replies:** 1\
**Last updated:** [June 29, 2021, 2:02pm UTC](https://discuss.elastic.co/t/ctx-variables-in-alerts/276403 "2021-06-29T14:02:48Z")

</div>

Hello, I am trying to create an generic alert. I would like to send a message to my telegram bot. Currently I have this script: { "text": " {{ctx.monitor.name}}: Please investigate the issue. Severity: {{ctx.trigge…

---

## [Kibana Elastic Search Alerting not firing](https://discuss.elastic.co/t/kibana-elastic-search-alerting-not-firing/276401)

<div class="topic-metadata">

**Author:** [@scrappedprince](https://discuss.elastic.co/u/scrappedprince)\
**Replies:** 1\
**Last updated:** [June 29, 2021, 1:56pm UTC](https://discuss.elastic.co/t/kibana-elastic-search-alerting-not-firing/276401 "2021-06-29T13:56:07Z")

</div>

0 Hi All, I am currently working on Kibana Alerting and what I wanted to perform is basically "Log threshold". Please see attached for the details of the alert rule. I wanted to match phrase of the word "warnings"…

---

## ["Copy as cURL" greyed out](https://discuss.elastic.co/t/copy-as-curl-greyed-out/277338)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 1\
**Last updated:** [June 29, 2021, 12:14pm UTC](https://discuss.elastic.co/t/copy-as-curl-greyed-out/277338 "2021-06-29T12:14:27Z")

</div>

Hi, On one instance of Kibana the option "Copy as cURL" is greyed out, on another Kibana on another stack it is available. How do I restore this functionality? Best regards, Robert

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=308)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=310)
